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DETAILED ACTION 

1 . Claims 34-53 have been examined. 

Response to Amendment 

2. The Amendment filed on 8/3 1/2006 is sufficient to overcome the prior rejection. A new 
reference has been added to the 35 USC 103 rejection. 

Continued Examination Under 37 CFR L114 

3. A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 CFR 
1.17(e), was filed in this application after final rejection. Since this application is eligible for continued 
examination under 37 CFR 1:114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the 
finality of the previous Office action has been withdrawn pursuant to 37 CFR 1.1 14. Applicant's 
submission filed on 8/31/2006 has been entered. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 34-41, 43-46, 48-49, 52-53 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Bezos (6,029,141) in view of Messer (2004/0230491). 

Claims 34-41, 43-46, 48-49, 52-53: 



Application/Control Number: 09/82 1,259 Page 3 

Art Unit: 3622 

Bezos discloses combining predetermined Content, an Interface Provider Identification 
Code, and a Dynamically-Generated User Identification Code to Form a Data Interface, 
Providing the Data Interface to a User System, and Receiving a Request for Selected Content 
that is Formed by Combining the Interface Provider Identification Code and the User 
Identification Code (Fig. 8; col 15, lines 5-16; col 17, lines 10-29; col 8, lines 16-31; col 13, lines 
41-54; col 14, lines 1-11). 

Note that Bezos discloses that the advertiser can use any of the predetermined content 
available from merchant (Amazon) website. And, note that the advertiser presents 
predetermined content that also includes a link with an advertiser identifier as well as a user 
identifier. 

Bezos further discloses that the url can include data interface provider identification and 
unique customer identification (Fig. 8). Bezos discloses that the unique customer id can be 
generated or added to the URL upon the user selecting a referral link (see above citations). 

Bezos does not explicitly disclose that the original referral link can include the unique 
customer ID before selection. 

However, Bezos discloses that the unique customer id can be generated or added to the 
URL upon the user selecting a referral link. And, Bezos discloses that the unique user id can be 
made a part of the advertising content that is presented to the user as the user shops (Fig. 8 and 
above citations). And, Bezos discloses that the unique customer ID can be part of the URL for 
subsequent activity (see above citations) even if the user remains on the original advertiser 
webpage (col 12, lines 27-41). And, MPEP 2144.04.IV.C discloses that changing the sequence 
is obvious and MPEP 2144.04.VI discloses that reversal or rearranging of parts is obvious. And, 
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Bezos discloses that the unique user id can be used for tracking and targeting a user (Fig. 1, item 
160). 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that Bezos placing the user id in the URL along with the presented 
advertising information can occur before or after selecting the advertising link. One would have 
been motivated to do this in order to allow relevant targeting/tracking information on a user to be 
utilized by the associate/advertiser as well as the merchant or because changing the sequence or 
reversal or rearranging of parts is an obvious modification. 

While Bezos discloses tracking requests for information, Bezos does not explicitly 
disclose tracking invalid requests for information. 

However, Messer discloses tracking and auditing user requests for information: 
"[0004] It is an object of the present invention to provide a data processing 
system for tracking, managing, and auditing select transactions between a 
plurality of computer workstations interconnected via a common network. 

[0013] In order to accomplish these and other objects, the present invention 
includes a data processing system designed and configured to operate on one or 
more servers interconnected for communication. The data processing system 
includes a Clearinghouse server programmed to track, manage, and audit 
associated transactions of Users clicking-through an Content Provider web site 
and purchasing a product or service from a Merchant. The Clearinghouse server 
is also programmed to track and report on the level of activity associated with 
the Users and produce, on a periodic basis, accounting statements for the 
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participants directed to the transactions that have transpired during the 
defined period". 

Messer further discloses tracking both valid and invalid information requests in order to 
improve commerce on the web: 

"[0002]. . .More specifically, the present invention relates to a referral 
tracking and control system for promoting goods and services on a wide area, 
public or private access network, such as the Internet . 

[0003] As discussed in more detail in the above-referenced parent cases, the 
present invention includes the ability to track select USER activity while on 
the Web including interactions with Web pages and click-through navigation to 
select Web sites where purchases can be executed. Notwithstanding these 
advancements and advantages, commerce on the web can still be improved upon. 
Recognizing some of the current difficulties in implementing affiliate programs 
has led to the innovations presented herein. 

[Abstract] An improved processing system for tracking commerce on the Internet 
provides for subvariable processing and includes web page scanning to discern fraud or 
improper content to insure proper promotion of select products within the 
network environment" (Abstract). 

Messer further discloses determining invalid requests for information and tracking invalid 
requests for information, and utilizing a database and reporting for invalid requests for 
information: 

"[0006] It is still another object of the present invention to provide a vehicle 
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for the detection of affiliate sponsored fraud ; exemplary fraud of concern 
includes use of a process that employs a Javascript to artificially multiply 
the number of clicks, impressions and/or sales on a banner or similar 
promotional piece. 

[0026]. . .In its preferred embodiments, the server is configured with a UNIX operating 
system. Database management software utilizing Oracle.RTM. on an Apache.RTM. 
Webserver is configured for the specific operating system environment. As 
discussed below, the Clearinghouse is further equipped to deter fraud and other 
non-productive activity. 

[0036] Turning now to FIG. 2, a high level flow chart depicts the programming 
logic for detecting click fraud . Logic begins at start block 200 and the 
system at block 210, pulls and enters the next web page in sequence. With the 
large number of affiliate web pages makes a sequential review perhaps too 
involve. Accordingly, the system may use a number of sampling techniques, that 
provide some policing capability. In this way, counter variable I increments 
the sampled pages and sends these to the scanning program block 220. 

[0037] ... If this test is also positive, the system generates a report, positively 
identifying the page as a potential source of click fraud., block 250. Logic then continues at 
260. 

[0038] In addition to the Javascript detection algorithm, the system further tracks 
potential click fraud by assessing historical patterns of commerce. For example, if a click- 
through includes the same ID, the system measures the interval between successive clicks. A 
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relatively fast click speed, or multiple clicks at a uniform interval reflects the possibility that the 
click is machine generated and potentially fraudulent . Other patterns may give further details, 
such as large jumps in traffic from individual sites. 

[0039] For large scale burst traffic generated from a single or a grouped IP address, 
within a short interval, the apache server of the Clearinghouse is programmed to block such 
traffic from hitting the database of the ad servers, thus defending the Clearinghouse server from 
certain types of DOS (denial of service) attacks. Based on these types of detected activity, the 
system will create a report and trigger further and more comprehensive evaluations". 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to add Messer' s auditing both valid and invalid requests for information 
to Bezos' auditing requests for information. One would have been motivated to do this in order 
to provide prevent fraud, provide better auditing and tracking of information requests, and to 
provide better commerce on the web. 

Messer further discloses utilizing encryption (Paragraph 0032). 

5. Claims 47, 50, 51 are rejected under 35 U.S.C. 103(a) as being unpatentable over Bezos 
(6,029,141) in view of Messer (2004/0230491) in view of Angles (5,933,81 1). 
Please see the above rejection of the independent claims. 

Also, Bezos discloses a shopping cart associated with a user expiring (col 14, lines 57- 

61). 

Bezos does not explicitly disclose that the user id expires. 
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However, Angles discloses utilizing cookies, that cookies can be utilized for 
identification purposes, that cookies can uniquely identify a computer, that cookies can be set to 
work for only certain URL addresses, that cookies can be set to expire, that identifiers and 
preferences can be stored locally: 

"(25) Persistent Client State Cookies (Cookie) . A file stored on the client 
computer which contains information such as user names and preferences. In the 
preferred embodiment, the Cookie in the consumer computer stores a member code 
which uniquely identifies each consumer. The specification for Cookies can be 
found at http://www.netscape.com/newsref/std/cookie.sub,— spec.html (col 6, lines 59-65); 

(55) A " cookie " is a small piece of information which a web server (via a CGI 
script) can store with a web browser and later read back from that browser. 

This is useful for having the browser remember some specific information across 
several pages; for example, when the consumer browses through a "virtual 
shopping mall" and add items to his "shopping cart," a list of the items he has 
picked up is kept in the consumer browser's cookie file so that the consumer 
can pay for all the items at once he has finished shopping. 

(56) To create a cookie, a web server sends a "Set -Cookie " HTTP header line 
in response to a URL access from a browser: 

(57) Set -Cookie : NAME=VALUE; expires=DATE ; path=PATH; 
domain=DOMAIN.sub.~ NAME; secure 

(58) NAME and VALUE are the actual information to include in the cookie . 
DATE is the time at which the cookie information expires and will be 
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"forgotten" by the browser. DOMAIN is a host or domain name for which the 
cookie is valid. PATH specifies a subset of the URLs at that server for which 
the cookie is valid. If "secure" is included in the cookie, then the cookie 
will only be transmitted over a secure network connection. All of these fields 
except NAME= VALUE are optional. 

(59) Whenever the browsing software sends a HTTP request for a URL on a 
server for which it has stored cookies, it includes a line in the form : Cookie: 
NAME= VALUE; NAME= VALUE; . . . which lists all cookies that apply to that 
particular URL. The following is a sample CGI program (a Unix shell script) 
that sends a cookie to a particular URL. 

(62) echo "Se t-cookie : codeno=12345A; expires =Thursday, Jan. 1 5 
1998-12:00:00 GMT"" (col 11, lines 5-40). 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that Bezos user id can expire. One would have been motivated to do this 
in order to prevent the use of outdated user identifiers. 

6. Claim 42 are rejected under 35 U.S.C. 103(a) as being unpatentable over Bezos 
(6,029,141) in view of Messer (2004/0230491) in view of Herz (2001/0014868). 

Claim 42: The combination of the prior art discloses the above the above. 

Bezos does not explicitly disclose utilizing different encryption standards for secure 
communications. 

However, Messer further disclose utilizing encryption (Para 0032). 
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And, Herz further discloses utilizing different encryption standards for secure 
communications (Paragraph 287). 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to add Messer and Herz utilization of encryption to the prior art's secure 
communications. One would have been motivated to do this in order to provide standard and 
readily available technical capabilities for secure communications. 



Response to Arguments 
7. Applicant's arguments with respect to claims 14-33 have been considered but are moot in 
view of the new grounds of rejection above. Examiner also notes the following. 

On page 8 of the Applicant's Remarks dated 8/31/06, Applicant states that the 
combination of the prior art does not render obvious: 

"combining predetermined Content, an Interface Provider Identification Code, and a 
Dynamically-Generated User Identification Code to Form a Data Interface, Providing the Data 
Interface to a User System, and Receiving a Request for Selected Content that is Formed by 
Combining the Interface Provider Identification Code and the User Identification Code". 

Examiner notes that it is the Applicant's claims as stated in the Applicant's claims that 
are being rejected with the prior art. Also, although the claims are interpreted in light of the 
specification, limitations from the specification are not read into the claims. See In re Van 
Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). And, Examiner notes that claims are 
given their broadest reasonable construction. See In re Hyatt, 21 1 F.3d 1367, 54 USPQ2d 1664 
(Fed. Cir. 2000). 
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Examiner notes that Applicant's claims concerning the data interface, data interface 
provider, and content provider are read in light of Applicant's Specification: 

"[0036] As discussed above, embodiments of the authentication system operate in 
conjunction with a network of computers having at least one provider computer 
12 and one user computer 14. Embodiments of the authentication system 20 
comprise a provider computer 12, a data interface 22, a data interface provider 
computer 15, an identifying indicia generator 24 and a plurality of databases 
36. The provider computer 12, such as a merchant computer, stores information 
that the data provider or merchant desires users to view. Typically, the 
information is directed to products or services offered by the merchant. To 
advertise or promote the products and services the merchant produces and/or 
hires a third party to produce data interface, such as advertisements for the 
information to be promoted. In another embodiment, such as an advertising 
service. provider model, a merchant or business desirous of promotion contracts 
with an advertising company to display advertisements of the business. The 
advertising company displays or promotes the business in various types of 
media, including, but not limited to, web pages, email, hard print and the 
like. In this embodiment, the advertising company chooses the advertisement, 
the location and times to display the advertisements for the business. 

[0045] Regardless of the actual data contained within the user identification 
code 34, in preferred embodiments, the dynamically generated user 
identification code 34 is coupled to, or encrypted into, the advertiser 
identification code 32 via the identifying indicia generator 24. The combined 
user identification code 34 and advertiser code 32 creates the confirmation 
code. If the user identification code is encrypted into an advertiser's 
identification, a confirmation code in the form of an encrypted advertiser's 
identification is created. Thus, when the user is transmitted to the 
merchant's web page, where the full advertisement or sales page resides, the 
advertiser's identification code 32 and user identification code 34 is 
transmitted to the merchant with the request for the advertisement. 

[0037] The data interface 22 is any representation of, or any information 
directed to, a set of predefined data that the provider, such as, the merchant, 
desires a user to view. The predefined data can include any type of 
information, including, but not limited, to product or service information. 

[0040] Generally, although not in all instances, the data interface provider, 
for example, the advertiser, is not the provider of the predefined data, that 
is, the data interface provider is not the merchant. In preferred embodiments, 
the data interface provider is identified by a code or identification. Thus, 
in the instance of advertisers, an advertiser's identification code is assigned 
by the merchant to the advertiser such that the merchant can track the 
advertising results for each advertiser." 
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And, Bezos discloses combining predetermined Content, an Interface Provider 
Identification Code, and a Dynamically-Generated User Identification Code to Form a Data 
Interface, Providing the Data Interface to a User System, and Receiving a Request for Selected 
Content that is Formed by Combining the Interface Provider Identification Code and the User 
Identification Code (Fig. 8; col 15, lines 5-16; col 17, lines 10-29; col 8, lines 16-31; col 13, lines 
41-54; col 14, lines 1-11). 

Note that Bezos discloses that the advertiser can use any of the predetermined content 
available from merchant (Amazon) website. And, note that the advertiser presents 
predetermined content that also includes a link with an advertiser identifier as well as a user 
identifier. 

Bezos further discloses that the url can include data interface provider identification and 
unique customer identification (Fig. 8). Bezos discloses that the unique customer id can be 
generated or added to the URL upon the user selecting a referral link (see above citations). 

Bezos does not explicitly disclose that the original referral link can include the unique 
customer ID before selection. 

However, Bezos discloses that the unique customer id can be generated or added to the 
URL upon the user selecting a referral link. And, Bezos discloses that the unique user id can be 
made a part of the advertising content that is presented to the user as the user shops (Fig. 8 and 
above citations). And, Bezos discloses that the unique customer ID can be part of the URL for 
subsequent activity (see above citations) even if the user remains on the original advertiser 
webpage (col 12, lines 27-41). And, MPEP 21 44.04.1 V.C discloses that changing the sequence 
is obvious and MPEP 2 144. 04. VI discloses that reversal or rearranging of parts is obvious. And, 
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Bezos discloses that the unique user id can be used for tracking and targeting a user (Fig. 1 5 item 
160). 

Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made that Bezos placing the user id in the URL along with the presented 
advertising information can occur before or after selecting the advertising link. One would have 
been motivated to do this in order to allow relevant targeting/tracking information on a user to be 
utilized by the associate/advertiser as well as the merchant or because changing the sequence or 
reversal or rearranging of parts is an obvious modification. 

On page 9, Applicant further states that the combination of the prior art does not render 
obvious a user identification code that is encrypted and expires. Please see the rejection above to 
see how Messer and Angles disclose encryption and expiring. 

Examiner notes that while specific references were made to the prior art, it is actually 
also the prior art in its entirety and the combination of the prior art in its entirety that is being 
referred to. Also, one cannot show nonobviousness by attacking references individually where 
the rejections are based on combinations of references. See In re Keller, 642 F.2d 413, 208 
USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. Cir. 1986). 

Also, it must be presumed that the artisan knows something about the art apart from what 
the references disclose. In re Jacobv, 309 F.2d 513, 135 USPQ 317 (CCPA 1962). The problem 
cannot be approached on the basis that artisans would only know what they read in references; 
such artisans must be presumed to know something about the art apart from what the references 
disclose. In re Jacoby. Also, the conclusion of obviousness may be made from common 
knowledge and common sense of a person of ordinary skill in the art without any specific hint of 
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suggestion a particular reference. In re Bozek, 416 F.2d 1385, USPQ 545 (CCPA 1969). And, 
every reference relies to some extent on knowledge or persons skilled in the art to complement 
that which is disclosed therein. In re Bode, 550 F.2d 656, USPQ 12 (CCPA 1977). 



Conclusion 

The following prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure: 

a) Johnson (5,813,009) discloses storing invalid requests for information in a database 
(Fig. lb; Fig. 3; Fig. 7; Fig. 6; and below): 

"(124) If the request for information is rejected during the card/terminal 
operation, the access card holder will receive a "Not Authorized" message, and 
the invalid access attempt will be updated on the access card database . If a 
sufficient number of invalid access attempts are made using any single card, 
the card will also be invalidated for access until a revalidation routine is 
performed on the card by an authorized agency. 

(134) Information requests not within the card bearer's authority will 
receive a "not authorized" message and the invalid access attempt will be 
updated (block 39) to card database 38"; 

b) Callaghan (5,737,523) discloses storing invalid requests for information in a database: 

"(25) In some implementations, the NFS server 200 may respond to in authentic 
NFS clients with more severe security measures. By way of example, the NFS 
server 200 may record in a file and/or on a system terminal that an 
unauthenticated NFS request 22 was received from NFS client 12. Depending upon 
the circumstances, the NFS server 200 may determine that the NFS client 12 is 
attacking and preclude the NFS client 12 from making further NFS requests. One 
embodiment of step 436 will be described below in more detail with reference to 
FIG. 10. 

(28) Once the export information table 222 has been searched in step 454, a 
step 456 determines whether the given file system 30 was found in the export 
information table 222. The given file system 30 is only present in the export 
information table 222 when the NFS server 200 is making the given file system 
30 accessible for sharing. When the given file system 30 is not found in 



Application/Control Number: 09/82 1,259 
Art Unit: 3622 



Page 15 



search step 454, control is passed to a step 458 which returns an error message 
to the NFS client 12. In some embodiments of the present invention, additional 
or different security measures may be performed. As described above with 
reference to FIG. 9, these include logging a message on the system terminal, 
maintaining a file record of unauthenticated client requests, and/or precluding 
operation of future NFS requests by the NFS client 12"; 

c) Pines (2005/0143064) discloses storing invalid requests for information in a database: 

"[01 19] As illustrated in FIG. 5D, those requested changes which cannot be 
implemented are stored in Rejected Updated Listings Tables 52D along with a 
reason for the rejection, for example, that the user is an invalid user, and/or 
that the requested changes is a duplicate, and the like"; 

d) Wagener (5,793,028) discloses storing invalid requests for information in a database. 
Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Arthur Duran whose telephone number is (571) 272-6718. The 
examiner can normally be reached on Mon- Fri, 8:00-4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Eric Stamber can be reached on (571) 272-6724. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Arthur Duran 
Primary Examiner 
10/17/06 



